Lumension Patch And Remediation User Guide

Transcription

Continue

Lumension patch and remediation user guideAgent Install Guide Lumension Endpoint Management and Security Suite 8.0 Lumension Endpoint Management and Security Suite -2- Notices Version Information Lumension Endpoint Management and Security Suite Agent Install Guide - Lumension Endpoint Management and Security Suite Version 8.0- Published: April 2014 Document Number: 02 017 8.0 141201429 Copyright Information Lumension Security, Inc. 8660 East Hartford Drive, Suite 300 Scottsdale, AZ 85255 Phone: 1 888.725.7828 Fax: 1 480.970.6323 E-mail: [email protected] Copyright 1999-2014; Lumension Security, Inc.; allrights reserved. Covered by one or more of U.S. Patent Nos. 6,990,660, 7,278,158, 7,487,495, 7,823,147, 7,870,606, and/or 7,894,514; other patents pending. This manual, as well as the software described in it, is furnished under license. No part of this manual may be reproduced, stored in a retrievalsystem, or transmitted in any form – electronic, mechanical, recording, or otherwise – except as permitted by such license. LIMITATION OF LIABILITY/DISCLAIMER OF WARRANTY: LUMENSION SECURITY, INC. (LUMENSION) MAKES NO REPRESENTATIONS OR WARRANTIES WITH REGARDTO THE ACCURACY OR COMPLETENESS OF THE INFORMATION PROVIDED IN THIS MANUAL. LUMENSION RESERVES THE RIGHT TO MAKE CHANGES TO THE INFORMATION DESCRIBED IN THIS MANUAL AT ANY TIME WITHOUT NOTICE AND WITHOUT OBLIGATION TO NOTIFYANY PERSON OF SUCH CHANGES. THE INFORMATION PROVIDED IN THIS MANUAL IS PROVIDED “AS IS” AND WITHOUT WARRANTY OF ANY KIND, INCLUDING WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE INFORMATION PROVIDED INTHIS MANUAL IS NOT GUARANTEED OR WARRANTED TO PRODUCE ANY PARTICULAR RESULT, AND THE ADVICE AND STRATEGIES CONTAINED MAY NOT BE SUITABLE FOR EVERY ORGANIZATION. NO WARRANTY MAY BE CREATED OR EXTENDED WITH RESPECT TO THISMANUAL BY SALES REPRESENTATIVES OR WRITTEN SALES MATERIALS. LUMENSION SHALL NOT BE LIABLE TO ANY PERSON WHATSOEVER FOR ANY LOSS OF PROFIT OR DATA OR ANY OTHER DAMAGES ARISING FROM THE USE OF THIS MANUAL, INCLUDING BUT NOTLIMITED TO DIRECT, INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR OTHER DAMAGES. -3- Lumension Endpoint Management and Security Suite Trademark Information Lumension , Lumension Endpoint Management and Security Suite, Lumension Endpoint Management Platform,Lumension Patch and Remediation, Lumension Enterprise Reporting, Lumension Security Configuration Management, Lumension Content Wizard, Lumension Risk Manager, Lumension AntiVirus, Lumension Wake on LAN, Lumension Power Management, Lumension RemoteManagement, Lumension Scan , Lumension Security Configuration Management, Lumension Application Control, Lumension Device Control, Lumension Endpoint Security, Lumension Intelligent Whitelisting, PatchLink , PatchLink Update , their associated logos, and all other Lumensiontrademarks and trade names used here are the property of Lumension Security, Inc. or its affiliates in the U.S. and other countries. RSA Secured is a registered trademark of RSA Security Inc. Apache is a trademark of the Apache Software Foundation. In addition, any other companies' names, tradenames, trademarks, and products mentioned in this document may be either registered trademarks or trademarks of their respective owners. Feedback Your feedback lets us know if we are meeting your documentation needs. E-mail the Lumension Technical Publications department at [email protected]to tell us what you like best, what you like least, and to report any inaccuracies. -4- Table of Contents Table of Contents Preface: About This Document. 7 TypographicalConventions.7 Contacting Lumension.8 Chapter 1: AgentRequirements. 9 Supported Endpoint Operating Systems. 9 Windows Endpoint OperatingSystems. 10 Mac Endpoint Operating Systems. 11 Linux Endpoint OperatingSystem. 12 UNIX Endpoint Operating System.13 Supported EndpointBrowsers.14 Windows Endpoint Requirements.14 Mac, Linux, or UNIX EndpointRequirements. 16 Agent Locales and Internationalization. 18 Supported Endpoint Module OperatingSystems. 19 Windows Endpoint Operating Systems. 19 Mac Endpoint OperatingSystems. 20 Linux Endpoint Operating Systems.21 UNIX Endpoint OperatingSystems. 22 Mobile Endpoint Operating Systems.23 Chapter 2: Understanding AgentInstallation. 25 The Lumension EMSS Agent Workflow.25 Understanding Agent InstallationMethods. 27 Chapter 3: Installing the Agent on Windows.29 Windows InstallationMethods.29 Agent Management Job for Windows. 29 Agent Management JobChecklist.30 Port and ICMP Requirements for an Agent Management Job. 31 Configuring Windows XP or Windows Server 2003Endpoints.32 Configuring Vista or Later Endpoints. 41 Configuring the Lumension EMSS Server for DiscoveryScanning. 49 Installing Agents by Agent Management Job. 50 Command Line forWindows.69 Command Line Workflow for Windows. 70 Downloading theInstaller.70 Silently Installing the Agent by Command Line for Windows. 72 Install of the Agent for WindowsManually. 75 Manual Install Workflow for Windows.76 Downloading theInstaller.76 Manually Installing the Agent for Windows.78 -5- Lumension Endpoint Management and Security Suite Chapter 4: Installingthe Agent on Mac. 83 Mac Installation Methods.83 Installing Java RuntimeEnvironment.84 Command Line Workflow for Mac. 85 Downloading theInstaller.86 Installing the Agent by Command Line for Mac.88 Silent Install by Command Line forMac. 93 Agent Installer Workflow for Mac. 96 Downloading theInstaller.97 Manually Installing the Agent for Mac.99 Chapter 5: Installing the Agent on Linux orUNIX. 105 Linux and UNIX Installation Method. 105 Installing Java RuntimeEnvironment.106 Command Line Workflow for Linux or UNIX. 107 Downloading theInstaller.108 Installing the Agent by Command Line for Linux or UNIX.110 Silent Install by Command Line for Linux orUNIX. 115 Appendix A: Upgrading Agents. 119 Agent Upgrade onWindows.119 Upgrading Agents From the Web Console. 119 Agent Upgrade on Mac, Linux, orUNIX. 122 Upgrading Agents by Command Line for Mac, Linux, or UNIX. 122 Appendix B: UninstallingAgents.125 Agent Uninstall on Windows.125 Uninstalling the Agent by Agent ManagementJob. 125 Uninstalling the Agent on Windows. 136 Agent Uninstall on Mac, Linux, orUNIX. 139 Uninstalling the Agent for Mac, Linux, or UNIX. 140 -6- Preface About This Document This Agent Install Guide is a resource written for all users ofLumension Endpoint Management and Security Suite 8.0. This document defines the concepts and procedures for installing, configuring, implementing, and using Lumension Endpoint Management and Security Suite 8.0. Tip: Lumension documentation is updated on a regular basis. To acquire the latestversion of this or any other published document, please refer to the Lumension Customer Portal ( . Typographical Conventions The following conventions are used throughout this documentation to help you identify various information types. Table 1: Typographical Conventions Convention Usage boldButtons, menu items, window and screen objects. bold italics Wizard names, window names, and page names. italics New terms, options, and variables. MONOSPACE UPPERCASE Keyboard keys. BOLD UPPERCASE SQL Commands. monospace File names, path names, programs, executables,command syntax, and property names. -7- Lumension Endpoint Management and Security Suite Contacting Lumension Arizona Ireland Luxembourg 8660 East Hartford Drive Suite 300 Scottsdale, AZ 85255 United States of America Lumension Security Ireland Ltd. Lyrr Building, Second Floor MervueBusiness & Technology Park Mervue, Galway Ireland Lumension Security SA Atrium Business Park Z.A Bourmicht 23, rue du Puits Romain L-8070 Bertrange Luxembourg Phone: 353 91 44 8980 Fax: 353 91 76 6722 Phone: 352 265 364 11 Fax: 352 265 364 12 Phone: 1 888 725 7828 Phone: 1480 970 1025 Fax: 1 480 970 6323 Lumension Support phone: 1 480 970 1025 (USA) 1 877 713 8600 (USA - legacy Sanctuary products) 353 9142 2999 (EMEA) 44 800 012 1869 (UK) 61 (02) 8223 9810 (Australia) 852 3071 4690 (Hong Kong) 65 6622 1078 (Singapore) submit a ticket:Registered users can open a support ticket via the customer portal ( . Lumension customers without a support account should contact our support team ([email protected]) to have an account created. Note: For additional contact information, please visit the Contact Lumension page at http://www.lumension.com/contact-us.aspx. -8- Chapter 1 Agent Requirements In this chapter: Supported Endpoint Operating Systems Supported Endpoint Browsers Windows Endpoint Requirements Mac, Linux, or UNIX Endpoint Requirements Agent Locales and Internationalization SupportedEndpoint Module Operating Systems The Lumension Endpoint Management and Security Suite Agent is supported on a variety of operating systems and platforms. Before installing the agent on an endpoint, ensure that system meets the agent requirements. Your endpoints must meet the hardware andsoftware requirements for the Lumension Endpoint Management and Security Suite Agent. The following sections include system requirements that you should verify prior to installing the Lumension EMSS Agent. The complete list of requirements are listed in the following topics: SupportedEndpoint Operating Systems on page 9 Supported Endpoint Browsers on page 14 Windows Endpoint Requirements on page 14 Mac, Linux, or UNIX Endpoint Requirements on page 16 Agent Locales and Internationalization on page 18 Supported Endpoint Module Operating Systems on page 19Supported Endpoint Operating Systems Lumension Endpoint Management and Security Suite Agent functionality is supported on a variety of operating systems. The agent is supported on endpoints that contain one of the supported endpoint operating system types: Windows Endpoint OperatingSystems on page 10 Mac Endpoint Operating Systems on page 11 Linux Endpoint Operating System on page 12 UNIX Endpoint Operating System on page 13 -9- Lumension Endpoint Management and Security Suite Windows Endpoint Operating Systems The following table lists supported Windowsplatforms on which the Lumension Endpoint Management and Security Suite Agent is supported. Table 2: Supported Windows Endpoint Operating Systems Supported OS Versions Supported Editions Supported Processors Data Width Supported Agent Windows Server 2012 R2 Standard1Datacenter1 Foundation Essentials Intel 64 bit Lumension EMSS 8.0 Windows 8.1 Enterprise Enterprise N Professional2 Professional N Intel 32/64 bit Lumension EMSS 8.0 Windows Storage Server 2012 Standard Workgroup Intel 64 bit Lumension EMSS 8.0 Windows Server 2012 Standard1 Datacenter1 Foundation Essentials Intel 64 bit Lumension EMSS 8.0 Windows 8 Enterprise Enterprise N Professional2 Professional N Intel 32/64 bit Lumension EMSS 8.0 Windows Server 2008 R2 Enterprise Standard Web Intel 64 bit Lumension EMSS 8.0 Windows Server 2008 Enterprise Standard Web Intel 32/64 bit Lumension EMSS 8.0 - 10 - Agent Requirements Supported OS Versions Supported Editions Supported Processors Data Width Supported Agent Windows 7 Enterprise Standard Web Intel 32/64 bit Lumension EMSS 8.0 Windows Vista3 BusinessEnterprise Ultimate Intel 32/64 bit Lumension EMSS 8.0 Windows Server 2003 SP1 Enterprise4 Standard4 Web Intel 32/64 bit Lumension EMSS 8.0 Windows Server 2003 R2 Enterprise4 Standard4 Web Intel 32/64 bit Lumension EMSS 8.0 Windows XP SP2 5 Professional Intel 32/64 bitLumension EMSS 8.0 1 Core mode for this edition is supported. This edi

Lumension Endpoint Management and Security Suite 8.0. This document defines the concepts and procedures for installing, configuring, implementing, and using Lumension Endpoint Management and Security Suite 8.0. Tip: Lumension documentation is updated on a regular basis. To acquire the latest